資安事件新聞週報 2022/2/28 ~ 2022/3/4

 資安事件新聞週報 2022/2/28  ~  2022/3/4

1.重大弱點漏洞/後門/Exploit/Zero Day
Cisco 近日發布更新以解決多個產品的安全性弱點
https://tools.cisco.com/security/center/publicationListing.x

Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products
https://thehackernews.com/2022/03/critical-patches-issued-for-cisco.html

Release of QRadar 7.5.0 Update Package 1 SFS (7.5.0-QRADAR-QRSIEM-2021.6.1.20220215133427)
https://reurl.cc/oeAQXV

Apache HTTP Server as used by IBM QRadar SIEM is vulnerable to
buffer overflow and denial of service (CVE-2021-44790, CVE-2021-34798, CVE-2021-39275)
https://reurl.cc/MbVNDm

Critical Bugs Reported in Popular Open Source PJSIP SIP and Media Stack
https://thehackernews.com/2022/03/critical-bugs-reported-in-popular-open.html

Critical Security Bugs Uncovered in VoIPmonitor Monitoring Software
https://thehackernews.com/2022/03/critical-security-bugs-uncovered-in.html

Linux快很多! Google 資安團隊提軟硬體與作業系統業者修補資安漏洞平均速度
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9733

GitLab出現重大漏洞，恐被用於挾持特定Token
https://about.gitlab.com/releases/2022/02/25/critical-security-release-gitlab-14-8-2-released/

Windows 11自動更新擾民 3招內建選項無煩惱
https://reurl.cc/k7gqbG

2.銀行/金融/保險/證券/支付系統/金融監理 新聞及資安
國銀ATM當機常搞烏龍　金管會下令作好2件事
https://www.cardu.com.tw/news/detail.php?45560

政清輔淡逢「五校聯盟」學程名額秒殺　中信金跨校培育金融科技人才
https://www.ctwant.com/article/170842

台灣保戶淪為重災戶？金管會回應「壽險對俄曝險逾千億」質疑
https://www.gvm.com.tw/article/87571

壽險業持有俄債 壽險公會：曝險占比低 風險可控
https://www.rti.org.tw/news/view/id/2125981

保險集團怡安驚傳遭到網路攻擊
https://www.bleepingcomputer.com/news/security/insurance-giant-aon-hit-by-a-cyberattack-over-the-weekend/

西方制裁俄羅斯 專家：美銀行業恐遭報復性網攻
https://reurl.cc/EpeXW0

將俄逐出SWIFT 歐美出重手
https://reurl.cc/6ExL35

3.電子支付/行動支付/pay/資安
一卡通Money、街口、悠遊付…8家電子支付！儲值、轉帳、提領手續費多少
https://reurl.cc/zMErYk

全聯「全支付」獲電支營業執照，PX Pay 助力電子支付服務
https://technews.tw/2022/03/01/px-mart-to-invest-in-the-electronic-payment-institutions/

LINE Bank與一卡通合作 創純網銀與電子支付結盟首例
https://udn.com/news/story/7239/6131587

行動支付權益一次看！　街口5月推提領免手續費活動
https://finance.ettoday.net/news/2199092

全家拿下電子支付執照！成全台第一間零售通路結合金融產業的電子支付
https://www.inside.com.tw/article/26820-familymart-epay

迎戰雙全進逼 icash Pay續拓餐飲通路、增線上購券功能
https://udn.com/news/story/7241/6139571?from=udn-ch1_breaknews-1-cate6-news

制裁生效！俄羅斯多家銀行無法使用電子支付
https://reurl.cc/6ExLn6

愛用電子支付者注意 金管會修電支存保額度
https://www.chinatimes.com/realtimenews/20220224004282-260410?chdtv

一銀宣布結盟Samsung Pay 行動支付新里程碑
https://www.chinatimes.com/realtimenews/20220301003342-260410?chdtv

LINE Pay學會這2招！刷臉就能付錢
https://reurl.cc/e6AWYm

4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約 資安
NFTs Aren’t As Stupid As You Think
https://onezero.medium.com/nfts-arent-as-stupid-as-you-think-bffab89697e3

副財長：多項原因 政府不承認加密貨幣為法定貨幣
https://reurl.cc/44np2D

派盾：2月DeFi漏洞利用被盜資金達3.39億美元
https://news.cnyes.com/news/id/4822364?exp=a

TreasureDAO駭客已開始歸還被盜NFT
https://news.cnyes.com/news/id/4823208

TreasureDAO遭攻擊、100多個NFT被盜！MAGIC暴跌30%；駭客歸還部分盜竊NFT
https://www.blocktempo.com/stolen-nfts-returned-to-users-hours-after-treasure-exploit/

又一間NFT 平台被駭客攻撃 損失200萬港幣
https://www.pinterest.com/pin/139822763421921715/

烏克蘭官方推特帳號貼出加密貨幣籌款地址，兩天入帳上千萬美元
https://www.techbang.com/posts/94517-ukraines-official-twitter-account-posted-a-cryptocurrency

烏克蘭政府籲對俄羅斯加密貨幣用戶實施全面打擊
https://reurl.cc/RjmOoG

成人女星 Lana Rhoades 被控涉嫌 NFT 騙局
https://hypebeast.com/zh/2022/2/lana-rhoades-cryptosis-1-5-million-usd-nft-rug-pull

分析鏈上詐騙慣性！資安公司派盾(PeckShield)：應避免這些特徵的加密貨幣或NFT專案
https://news.cnyes.com/news/id/4821585

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
駭客已對烏克蘭的各大機構部署了破壞性的惡意程式
https://www.cisa.gov/uscert/ncas/alerts/aa22-057a

殭屍網路FritzFrog捲土重來鎖定醫療、教育、政府單位
https://www.informationsecurity.com.tw/article/article_detail.aspx?tv=12&aid=9738

勒索軟體駭客首度提出要求，要脅Nvidia解除顯示卡挖礦限制來換回機密資料
https://www.tomshardware.com/news/nvidia-hackers-threaten-to-release-lhr-performance-limiter

Dridex 殭屍網路和 Entropy 勒索軟體的程式碼極為相似
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9740

安卓木馬TeaBot鎖定逾400個金融機構用戶，竊取帳密和簡訊內容
https://www.cleafy.com/cleafy-labs/teabot-is-now-spreading-across-the-globe

TeaBot 木馬惡意軟體再次出現在 Google Play Store 中，目標鎖定美國用戶進行金融駭侵攻擊
https://www.twcert.org.tw/tw/cp-104-5800-c8e65-1.html

實聯制要小心！QR碼掃描器藏「木馬病毒」
https://reurl.cc/DdE3Gj

Conti 和 Karma 勒索軟體同時利用 ProxyShell 漏洞攻擊醫療機構
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9741

惡意軟體FoxBlade於俄烏戰爭爆發前夕，攻擊烏克蘭軍事單位與政府機構
https://blogs.microsoft.com/on-the-issues/2022/02/28/ukraine-russia-digital-war-cyberattacks/

CERT-UA alerts of phishing campaign
https://otx.alienvault.com/pulse/6222096d5505582bf113ccb7

SharkBot: A new generation Android banking Trojan being distributed on Google Play Store
https://reurl.cc/RjmXEn

Asylum Ambuscade: State Actor Uses Compromised Private Ukrainian Military Emails
to Target European Governments and Refugee Movement
https://reurl.cc/02RXlk

俄烏戰爭爆發前夕針對烏克蘭的網路攻擊恐不只一起！惡意軟體IsaacWiper鎖定政府機關破壞資料
https://www.welivesecurity.com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/

IsaacWiper and HermeticWizard: New wiper and worm targeting Ukraine
https://www.welivesecurity.com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/
https://go.recordedfuture.com/hubfs/reports/mtp-2022-0302.pdf

New Sandworm Malware Cyclops Blink Replaces VPNFilter
https://www.ncsc.gov.uk/news/new-sandworm-malware-cyclops-blink-replaces-vpnfilter

New information stealing malware “ColdStealer” being distributed
https://asec.ahnlab.com/ko/31703/

Arkei Infostealer Expands Reach Using SmokeLoader to Target Crypto Wallets and MFA
https://reurl.cc/qO6N20

Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks
https://www.cisa.gov/uscert/ncas/alerts/aa22-055a

中國駭客將後門程式Daxin埋藏於作業系統核心，攻擊政府單位與關鍵基礎設施
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/daxin-backdoor-espionage

China-linked Daxin Malware Targeted Multiple Governments in Espionage Attacks
https://thehackernews.com/2022/03/china-linked-daxin-malware-targeted.html

Daxin: Stealthy Backdoor Designed for Attacks Against Hardened Networks
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/daxin-backdoor-espionage

The Hunt for the Lost Soul: Unraveling the Evolution of the SoulSearcher Malware
https://www.fortinet.com/blog/threat-research/unraveling-the-evolution-of-the-soul-searcher-malware

UNC1151/GhostWriter Phishing Attacks Target Ukrainian Soldiers
https://community.riskiq.com/article/e3a7ceea/description

OutSteel, SaintBot Delivered by Spear Phishing Attacks Targeting Ukraine
https://unit42.paloaltonetworks.com/ukraine-targeted-outsteel-saintbot/

Destructive Malware Targeting Organizations in Ukraine
https://reurl.cc/jkoGeL

勒索軟體Conti內部機密外洩，起因是表態支持俄羅斯
https://www.bleepingcomputer.com/news/security/conti-ransomwares-internal-chats-leaked-after-siding-with-russia/

力挺俄羅斯引發烏克蘭人士不滿，勒索軟體Conti原始碼遭到洩露
https://www.bleepingcomputer.com/news/security/conti-ransomware-source-code-leaked-by-ukrainian-researcher/

Conti Ransomware Gang's Internal Chats Leaked Online After Siding With Russia
https://thehackernews.com/2022/03/conti-ransomware-gangs-internal-chats.html

TrickBot Malware Gang Upgrades its AnchorDNS Backdoor to AnchorMail
https://thehackernews.com/2022/03/trickbot-malware-gang-upgrades-its.html

Rebirth of Emotet: New Features of the Botnet and How to Detect it
https://thehackernews.com/2022/02/reborn-of-emotet-new-features-of-botnet.html

B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
100 Million Samsung Galaxy Phones Affected with Flawed Hardware Encryption Feature
https://thehackernews.com/2022/02/100-million-samsung-galaxy-phones.html

三星手機爆資安漏洞！Galaxy系列機種皆遭殃
https://newtalk.tw/news/view/2022-03-01/716924

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力
雅虎徹底退出中國 228起關閉電子信箱服務
https://www.rti.org.tw/news/view/id/2125720

從俄羅斯到中國，那些由政府外包的駭客攻擊行動
https://vocus.cc/article/621c44fefd897800015f70ff

Taiwan Platform for Ukraine Donations Hacked 台烏募款平台上線第2天 遭海外駭客攻擊
https://news.pts.org.tw/article/569881

駭客廣泛運用Log4Shell漏洞發動DDoS攻擊、挖礦攻擊
https://blog.barracuda.com/2022/03/02/threat-spotlight-attacks-on-log4shell-vulnerabilities/

駭客濫用API發動的攻擊行動，在2021年爆增近7倍
https://reurl.cc/pWAZrx

輪胎大廠普利司通遭到網路攻擊而停工數日
https://www.zdnet.com/article/bridgestone-still-struggling-with-plant-closures-after-cyberattack/

Toyota 日本國內所有工廠，因供應商遭駭而全面停工
https://www.twcert.org.tw/tw/cp-104-5780-7b78f-1.html

駭客組織ShinyHunters非法獲取了哪些企業的使用者資料
https://bearask.com/ent/2237716.html

鎖定各國政府機構竊密 美資安公司揪出中國絕密惡意軟體
https://news.ltn.com.tw/news/world/breakingnews/3844902

部分日本廠區遭駭 環球晶：受影響機台逐步恢復生產
https://reurl.cc/GoOE9x

日本子公司遭網路攻擊 環球晶：機密資料無影響
https://newtalk.tw/news/view/2022-03-03/718170

Nvidia證實遭網攻，有駭客團體宣稱是他們所為，恐嚇該公司若不解除限制與開放原始碼就洩密
https://www.ithome.com.tw/news/149674

Nvidia也遭攻擊！駭客竊取1TB的GPU軟硬體資料、要求開放顯卡挖礦
https://reurl.cc/qO6Nyy

駭客已竊取英偉達員工憑證、開始兜售解除顯卡挖礦限制方式
https://www.owlting.com/news/articles/62730

勒索未果，駭客公佈英偉達核心原始碼
https://uetie.com/tech/691077.html

美國參議院通過一攬子網絡安全議案，將要求公司上報駭客攻擊事件
https://reurl.cc/EpeXz1

772萬粉駭客籲全球「鍵盤教訓俄羅斯」　正反兩極聲音四起
https://www.taisounds.com/Global/Trend/Latest/uid5357371493

烏克蘭招募IT軍隊，鎖定俄羅斯31個關鍵基礎設施發動網路攻擊
https://www.bleepingcomputer.com/news/security/ukraine-recruits-it-army-to-hack-russian-entities-lists-31-targets/

烏克蘭網軍宣布駭入多個俄羅斯關鍵網站，使其下線
https://www.twcert.org.tw/tw/cp-104-5798-fb7eb-1.html

烏克蘭網軍出擊 鎖定破壞俄羅斯電力鐵路設施
https://wantrich.chinatimes.com/news/20220302900805-420201

駭客匿名者出招！俄國家電視頻道遭入侵　播放烏克蘭歌
https://today.line.me/tw/v2/article/LXOX5jM

全球最大駭客組織「匿名者」向莫斯科宣戰！駭入俄羅斯國防部資料庫、在官媒電視台播放挺烏克蘭歌曲
https://reurl.cc/veAmXk

從烏俄之戰看「在地化」情資的重要性
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9739

2022 年烏克蘭網路攻擊：網路資安地緣政治
https://blog.trendmicro.com.tw/?p=71479

駭客挺烏癱瘓俄國充電站 螢幕寫「普亭是傻瓜」
https://www.worldjournal.com/wj/story/121256/6136845

匿名者：俄曾洩密提醒澤倫斯基「慎防暗殺」
https://news.ltn.com.tw/news/world/breakingnews/3847353

情報單位洩密烏克蘭總統暗殺行動？　駭客「匿名者」爆料：俄國將掀內部鬥爭
https://www.upmedia.mg/news_info.php?Type=3&SerialNo=139005

匿名者：俄國洩露暗殺澤倫斯基計畫　內部權鬥將推翻普欽
https://news.tvbs.com.tw/amp/world/1730315

針對俄羅斯對烏克蘭出兵，匿名者、Conti等駭客組織選邊站
https://www.ithome.com.tw/news/149578

調查組織《Bellingcat》數位查證掌握戰況 紀錄戰爭罪行
https://tfc-taiwan.org.tw/articles/7023

俄國早看透！匿名者發起網路攻擊，普丁準備「國家級內網」應戰
https://technews.tw/2022/03/04/russia-internet/

俄網遭駭客頻發攻擊　俄媒爆：政府準備啟動Runet內網切斷全球網路
https://www.ettoday.net/news/20220302/2199405.htm

最大駭客「匿名者」：癱瘓俄航太局 關閉1500個俄網站
https://udn.com/news/story/122699/6134175

「匿名者」駭客癱瘓1500個俄網站！　俄航太局也無法聯繫自家衛星
https://www.ettoday.net/news/20220302/2199138.htm

「全球暴打俄羅斯」連駭客也來了！《匿名者》宣布癱瘓普丁的間諜衛星
https://tw.appledaily.com/international/20220302/DLBALUKPIBHRBPLNUWDPBHOJ5U/

烏克蘭版「唐鳳」︰他組駭客軍團、要搜普丁錢包
https://www.gvm.com.tw/article/87568

駭客出手了？北溪2號傳破產裁員　官網「慘被攻擊到關閉」
https://www.setn.com/News.aspx?NewsID=1079009

Taiwan Can Help？烏克蘭宣布招募「網路義勇軍」 癱瘓俄羅斯網路
https://times.hinet.net/news/23780110

烏克蘭用 Telegram 招募志願者，成立「IT 軍隊」對抗俄羅斯網路攻擊
https://technews.tw/2022/03/02/ukraine-recruits-volunteers-through-telegram/

烏克蘭組建黑客大軍！俄羅斯錯過網攻黃金機遇期
https://buzzorange.com/techorange/2022/03/03/ukraine-it-army/

匿名者對俄宣戰 號召全球駭客網攻
https://ec.ltn.com.tw/article/breakingnews/3845123

烏俄網路大戰　專家：中國駭客也在台灣埋了「數位定時炸彈」
https://www.cw.com.tw/article/5120248

駭客組織 Anonymous 傳向俄兵喊話：交出坦克送 5 萬美元比特幣
https://www.hksilicon.com/articles/2152084

駭客組織Anonymous以比特幣作獎勵引誘俄羅斯士兵捐贈坦克
https://news.cnyes.com/news/id/4823126

俄烏戰況膠著…戰場轉往網路戰？「12萬俄軍參戰名單」疑遭匿名者外洩
https://news.sina.com.tw/article/20220302/41305674.html

俄專家：微軟若撤離俄羅斯 用戶會轉向Linux
https://ec.ltn.com.tw/article/breakingnews/3847621

俄烏戰爭爆發後，逾30所烏克蘭大學WordPress網站遭到入侵
https://reurl.cc/zMEr60

俄羅斯截斷烏克蘭網路 馬斯克「星鏈」解救
https://www.worldjournal.com/wj/story/121256/6129329

俄烏戰爭引台海憂慮 余茂春：台灣比烏克蘭安全
https://www.soundofhope.org/post/597757?lang=b5

中共趁亂南海軍演 美艦駛過台海展示支持
https://www.soundofhope.org/post/597715?lang=b5

Hackers Who Broke Into NVIDIA's Network Leak DLSS Source Code Online
https://thehackernews.com/2022/03/hackers-who-broke-into-nvidias-network.html

Hackers Try to Target European Officials to Get Info on Ukrainian Refugees, Supplies
https://thehackernews.com/2022/03/hackers-try-to-hack-european-officials.html

Hackers Begin Weaponizing TCP Middlebox Reflection for Amplified DDoS Attacks
https://thehackernews.com/2022/03/hackers-begin-weaponizing-tcp-middlebox.html

Microsoft Finds FoxBlade Malware Hit Ukraine Hours Before Russian Invasion
https://thehackernews.com/2022/03/microsoft-finds-foxblade-malware-hit.html

(LINE Bank) Application Security Engineer_應用系統安全工程師
http://www.104.com.tw/jb/104i/job/view?j=6ty6x

醫療資訊室(資訊組)院聘資訊工程師(資安)
https://job.taiwanjobs.gov.tw/Internet/jobwanted/JobDetail.aspx?EMPLOYER_ID=48309&HIRE_ID=11031135

精誠資訊擴大徵才！全年召募逾1000名員工
https://ec.ltn.com.tw/article/breakingnews/3848332

疫後首場實體徵才登場 五大金控徵才亮點一次看
https://wantrich.chinatimes.com/news/20220302900770-420101

【資安所】資安測試工程師
https://www.104.com.tw/jb/104i/job/view?j=7jsuc

【ISMS/PIMS】資安風險管理顧問
https://www.104.com.tw/job/7jpm6

【金融業】資安風險管理顧問
https://www.104.com.tw/job/7jpm4

大學甄選入學委員會徵聘資安人員1名
https://www.ccu.edu.tw/new_content_demo.php?type=bulletin&id=37905

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全
假QR code行釣魚之實! 四大常見QR code騙術
https://www.informationsecurity.com.tw/article/article_detail.aspx?tv=11&aid=9736

OL控職場霸凌！為蒐證用主管電腦寄email遭開除　法官：解僱違法
https://tw.appledaily.com/local/20220302/JCZPIEWW6FD7TMVRTKZ757DSTU/

幣安（Binance）警告:加密貨幣投資者小心簡訊釣魚詐騙
https://blog.trendmicro.com.tw/?p=71399

網釣攻擊鎖定幫助烏克蘭難民的國家而來
https://reurl.cc/3j93eX

白俄羅斯駭客鎖定烏克蘭武裝部隊，發動網路釣魚攻擊
https://www.bleepingcomputer.com/news/security/ukraine-links-belarusian-hackers-to-phishing-targeting-its-military/

Facebook 封禁散播俄軍在烏不實資訊的虛假賬戶
https://chinese.engadget.com/facebook-takes-down-fake-accounts-boosting-russian-disinformation-in-ukraine-110040977.html

大量機密數據遭公開 加州律師協會：正全力調查
https://www.epochtimes.com/b5/22/2/28/n13610394.htm

Microsoft 365 中的Power Automate，有資料外洩的疑慮
https://blog.twnic.tw/2022/02/28/21885/

E.研究報告/工具
HENNGE 邀請資策會講師分享 2022 企業資安法規概覽及法遵建議
https://hennge.com/tw/blog/security-law-webinar.html

APT36 (Earth Karkaddan) 駭客集團的攻擊手法與惡意程式分析
https://blog.trendmicro.com.tw/?p=71210

If you haven‘t heard of descriptors, you don‘t know Python
https://medium.com/@florian.rieger/if-you-haven-t-heard-of-descriptors-you-don-t-know-python-1ea4fd1614c2

Python: 5 ways to make money without a job
https://medium.com/@saadbenaicha/python-5-ways-to-make-money-without-a-job-377d2a8639c0

Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption
https://thehackernews.com/2022/03/researchers-demonstrate-new-side.html

How to Automate Offboarding to Keep Your Company Safe
https://thehackernews.com/2022/03/how-to-automate-offboarding-to-keep.html

Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities
https://thehackernews.com/2022/03/report-nearly-75-of-infusion-pumps.html

Experts Create Apple AirTag Clone That Can Bypass Anti-Tracking Measures
https://thehackernews.com/2022/02/experts-create-apple-airtag-clone-that.html

OPENSSLDIR Privilege Escalation CVE-2021-2307 - Paper
https://www.exploit-db.com/docs/50747

LightSpeed Cache Vulnerability - Paper
https://www.exploit-db.com/docs/50679

Abusing LAPS - Paper
https://www.exploit-db.com/docs/50680

F.商業
Fortinet 發布新世代防火牆 FortiGate 3000F 助全球企業建立混合式資安架構，加速數位創新
https://reurl.cc/KpRQGy

新惡意程式可突破防火牆　中租迪和提高端點防護顧資安
https://finance.ettoday.net/news/2199492?from=rss&redirect=1

進用退除役官兵比例22% 旭聯資安獲頒獎座表彰
https://www.mypeoplevol.com/Article/17783

雲端人資系統「Femas HR」 通過國際級資安標準ISO27001驗證，創今年全台首例
https://stock.pchome.com.tw/news/cat9/20220301/64612922013934287001.html

因應 5G 網路高密度佈署模式， NXP 攜手仁寶打造整合小型基站解決方案
https://www.cool3c.com/article/173600

G.政府
停電是駭客網攻？政院：調查報告完成前 不排除任何可能
https://www.epochtimes.com/b5/22/3/3/n13618688.htm

追停電原因 政院：人員疏失就咎責
https://reurl.cc/02RXYK

大停電、台電官網停擺 刑事局：目前未有駭客入侵跡象
https://udn.com/news/story/7238/6136922

NCC打造國家通訊領域安全軟體實驗室 提升資安防護力
https://www.peopo.org/news/573866

俄烏開戰 政院：國安基金隨時因應
https://wantrich.chinatimes.com/news/20220301900433-420501

H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安
CISA Warns of High-Severity Flaws in Schneider and GE Digital's SCADA Software
https://thehackernews.com/2022/02/cisa-warns-of-high-severity-flaws-in.html

IoV Security車聯網資安不亞於性能安全
https://www.informationsecurity.com.tw/article/article_detail.aspx?tv=11&aid=9735

5G智慧應用下，華電聯網推動自主研發資安平台
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9734

擘劃5G智慧應用與未來先進科技服務願景，協助企業實現數位轉型及實踐ESG責任
華電聯網推動 5G 智慧應用　加速數位化願景與創新步伐
https://www.netadmin.com.tw/netadmin/zh-tw/snapshot/A366255F5EDC43C89B74317DF3C8F9EC

鴻海研究院NExT Forum 宣示守護AI生態圈
https://wantrich.chinatimes.com/news/20220303900676-420101

全球已經把 AI 安全發展當成軍備競賽，台灣跟上了嗎
https://buzzorange.com/techorange/2022/03/02/ai-security-foxconn-next-forum/

7成5醫用輸液幫浦存在已知安全漏洞
https://unit42.paloaltonetworks.com/infusion-pump-vulnerabilities/

Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50797

I.教育訓練
中華軟協-iPAS「初級」資訊安全工程師能力研習衝刺班：全面招生中
https://www.cs.nycu.edu.tw/announcements/detail/8778

2022「證券期貨資訊安全實務養成課程」即日起開始報名
https://www.sfi.org.tw/news/news-7/3589

網路時代人人要學的資安基礎必修課 (How Cybersecurity Really Works)
https://www.tenlong.com.tw/products/9786263240384?list_name=p-r-zh_tw

不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書）
https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html

【資安管理國際證照懶人包】學習心得、考試要點一次整理！2022 轉職夢幻工作看這篇
https://buzzorange.com/techorange/2021/12/30/isaca/

CISSP考試心得 – Benson
https://reurl.cc/GbWvxd

CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得
https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/

EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022
https://reurl.cc/1oyEM8

CEH v11 考試心得與準備方式
https://blog.sean.taipei/2022/01/ceh

110年新進人員「校園資訊安全講座」教材
https://cc.nccu.edu.tw/p/406-1001-740,r18.php

【訓練教材D】資訊安全技術教育訓練教材
https://iscb.nchu.edu.tw/2019/07/d.html

109資通安全管理法數位教育訓練
https://reurl.cc/ARlmqp

110-1初級資訊安全工程師-資訊安全管理概論
https://yamol.tw/exam.php?id=104050

中大信息工程學系 栽培資訊科技領導人才
https://reurl.cc/ARZKDK

伊雲谷、中山大學產學合作 累積雲端資安人才能量
https://ctee.com.tw/industrynews/technology/587459.html

SANS Cyber Aces Online Tutorials
https://tutorials.cyberaces.org/tutorials.html

Free Online Cybersecurity Courses (MOOCs)
https://www.cyberdegrees.org/resources/free-online-courses/

Develop Your Cybersecurity Skills
https://www.cybrary.it/catalog/cybersecurity/

Mobile App Security
https://www.cybrary.it/course/mobile-app-security/

Introduction to Cybersecurity
https://reurl.cc/bnaj6d

How to Tackle SaaS Security Misconfigurations
https://thehackernews.com/2021/11/how-to-tackle-saas-security.html

How to Build a Security Awareness Training Program that Yields Measurable Results
https://thehackernews.com/2021/11/how-to-build-security-awareness.html

Common Attacks
https://choson.lifenet.com.tw/?p=1174

6.近期資安活動及研討會
WTM International Women's Day 2022  2022/3/5
https://www.meetup.com/GDGTaipei/events/284257930/

Just a chat - with no Expectations 2022/3/5
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/284285574/

Coffee & Code 2022/3/6
https://www.meetup.com/Innovate-Taiwan/events/284285192/

區塊鏈WEB3資安管理教戰手冊 2022/3/9
https://www.accupass.com/event/2202130729525903217230

Android Code Club(Taipei) 2022/3/9
https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/284070785/

科技、媒體、組織聯手 共同防制不實訊息論壇 2022/3/11
https://acfd2019.kktix.cc/events/831e3194-copy-2

2022嘉藥反毒與資安機器人競賽 2022/3/12
https://reurl.cc/9OO7kj

Scala Taiwan #39 - 用Scala寫基因體醫學 2022/3/15
https://www.meetup.com/Scala-Taiwan-Meetup/events/284242666/

Flutter Festival Taipei 2022/3/16
https://www.meetup.com/Flutter-Taipei/events/283785315/

國家高速網路與計算中心教育訓練 「大數據程式開發平台(VM版本)」建置與開發實務課程 2022/3/18
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3972&from_course_list_url=homepage

OSCP 高階滲透測試精進班 2022-02-12~2022-03-20
https://college.itri.org.tw/course/all-events/35FC13F1-05A3-44CF-85B1-2D01B6F92632.html

國家高速網路與計算中心教育訓練 「大數據程式開發平台(VM版本)」建置與開發實務課程 2022/5/27
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3983&from_course_list_url=homepage

風險導向資安稽核 2022/7/20
https://www.cisanet.org.tw/Course/Detail/2756